Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows attackers to modify the valet command with root privileges. The vulnerability enables users to edit the symlinked valet command to execute arbitrary code with root permissions without requiring additional authentication. This affects the Laravel development environment tool used on macOS systems. The vulnerability has been documented with exploit code available publicly.